tyler.durden
/
icinga2
mirror of https://github.com/Icinga/icinga2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #8907 from Icinga/probot/sync-changelog/421a2141a61316bbe7b518bd80a07117e08a7e4b 

CHANGELOG.md: add v2.12.5
This commit is contained in:
Alexander Aleksandrovič Klimov 2021-07-16 11:08:42 +02:00 committed by GitHub
parent 421a2141a6 ab3e71fe70
commit b077752589
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 35 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
CHANGELOG.md
View File

@ -7,6 +7,41 @@ documentation before upgrading to a new release.
Released closed milestones can be found on [GitHub](https://github.com/Icinga/icinga2/milestones?state=closed).
## 2.12.5 (2021-07-15)
Version 2.12.5 fixes two security vulnerabilities that may lead to privilege
escalation for authenticated API users. Other improvements include several
bugfixes related to downtimes, downtime notifications, and more reliable
connection handling.
### Security
* Don't expose the PKI ticket salt via the API. This may lead to privilege
escalation for authenticated API users by them being able to request
certificates for other identities (CVE-2021-32739)
* Don't expose IdoMysqlConnection, IdoPgsqlConnection, IcingaDB, and
ElasticsearchWriter passwords via the API (CVE-2021-32743)
* Windows: Update bundled OpenSSL to version 1.1.1k #8885
Depending on your setup, manual intervention beyond installing the new versions
may be required, so please read the more detailed information in the
[release blog post](https://icinga.com/blog/2021/07/15/releasing-icinga-2-12-5-and-2-11-10/)
carefully.
### Bugfixes
* Don't send downtime end notification if downtime hasn't started #8877
* Don't let a failed downtime creation block the others #8863
* Support downtimes and comments for checkables with long names #8864
* Trigger fixed downtimes immediately if the current time matches
(instead of waiting for the timer) #8889
* Add configurable timeout for full connection handshake #8866
### Enhancements
* Replace existing downtimes on ScheduledDowntime change #8879
* Improve crashlog #8865
## 2.12.4 (2021-05-27)
Version 2.12.4 is a maintenance release that fixes some crashes, improves error handling